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AMENDMENTS TO THE CLAIMS 

Please amend claims 1, 13, 19, and 37, as follows: 

1 . (Currently Amended) A method for linking between nodes in a distributed computing 
system, the method comprising: 

implementing a domain comprising a first network node and a second network node; 

implementing a data object that indicates , before a link is established between the first 
and second network nodes, whether the domain permits fak s the link between the first and 
second network nodes without verification of user credentials; and 

sending a link request from the first network node to the second network node; and 

establishing a the link between the first network node and the second network node 
without requiring the user credentials if the data object indicates verification of the user 
credentials is not required. 

2. (Original) The method of claim 1 in which a connected user makes the link request, and 
the link is established as a connected user. 

3. (Original) The method of claim 1 in which a connected user makes the link request as a 
current user, and the link is established as a current user. 

4. (Original) The method of claim 3 in which the link request is embedded in a stored 
object. 

5. (Original) The method of claim 4 in which the stored object is selected from the list 
consisting of: a procedure, a function, a view, a trigger. 
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6. (Original) The method of claim 1 in which the second network node comprises a list of 
untrusted nodes, wherein the link between the first network node and the second network node is 
not established if the list of untrusted nodes indicates that the first network node is untrusted. 

7. (Original) The method of claim 1 in which the data object that indicates whether the 
domain permits links between nodes without verification of user credentials is a flag in a domain 
object corresponding to the domain. 

8. (Original) The method of claim 1 further comprising a second domain having a third 
network node, in which a second link request is sent from the first network node to the third 
network node, wherein an act of establishing a network link between the first network node and 
the third network is made only upon verification of user credentials. 

9. (Original) The method of claim 1 further comprising a second domain having a third 
network node, in which a second link request is sent from the first network node to the third 
network node, wherein an act of establishing a network link between the first network node and 
the third network is made without verification of user credentials. 

10. (Original) The method of claim 1 in which mutual authentication occurs between the first 
network node and the second network node. 

1 1 . (Original) The method of claim 1 in which the first network node passes information to 
the second network node regarding a prior chain of links related to the link request. 

12. (Original) The method of claim 1 1 in which the information regarding the prior chain of 
links comprises identification of all previous users in the prior chain of links. 

13. (Currently Amended) The method of claim 1 1 in which the information regarding the 
prior chain of links comprises identification of previous nodes in prior related links. 
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14. (Original) The method of claim 1 1 in which a last entry in the information is checked for . 
an untrusted user/node combination. 

15. (Original) The method of claim 14 in which trusted user/node combinations are 
maintained at a central authority. 

16. (Original) The method of claim 15 in which the central authority is the directory. 

17. (Original) The method of claim 14 in which untrusted combinations are stored in a 
database. 

1 8. (Original) The method of claim 1 further comprising: 

establishing the link between the first network node and the second network node only 
upon verification of the user credentials if the data object indicates that user credentials are 
required. 

19. (Currently Amended) A computer program product that includes a medium usable by a 
processor, the medium having stored thereon a sequence of instructions which, when executed by 
said processor, causes said processor to execute a process for linking between nodes in a 
distributed computing system, the process comprising: 

implementing a domain comprising a first network node and a second network node; 

implementing a data object that indicates , before a link is established between the first 
and second network nodes, whether the domain permits links the link between the first and the 
second network nodes without verification of user credentials; 

sending a link request from the first network node to the second network node: and 

establishing a the link between the first network node and the second network node 
without requiring the user credentials if the data object indicates verification of the user 
credentials is not required. 
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20. (Original) The computer program product of claim 19 in which a connected user makes 
the link request, and the link is established as a connected user. 

21. (Original) The computer program product of claim 19 in which a connected user makes 
the link request as a current user, and the link is established as a current user. 

22. (Original) The computer program product of claim 21 in which the link request is 
embedded in a stored object. 

23. (Original) The computer program product of claim 22 in which the stored object is 
selected from the list consisting of: a procedure, a function, a view, a trigger. 

24. (Original) The computer program product of claim 19 in which the second network node 
comprises a list of untrusted nodes, wherein the link between the first network node and the 
second network node is not established if the list of untrusted nodes indicates that the first 
network node is untrusted. 

25. (Original) The computer program product of claim 19 in which the data object that 
indicates whether the domain permits links between nodes without verification of user 
credentials is a flag in a domain object corresponding to the domain. 

26. (Original) The computer program product of claim 19 further comprising a second 
domain having a third network node, in which a second link request is sent from the first network 
node to the third network node, wherein an act of establishing a network link between the first 
network node and the third network is made only upon verification of user credentials. 
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27. (Original) The computer program product of claim 19 further comprising a second 
domain having a third network node, in which a second link request is sent from the first network 
node to the third network node, wherein an act of establishing a network link between the first 
network node and the third network is made without verification of user credentials. 

28. (Original) The computer program product of claim 19 in which mutual authentication 
occurs between the first network node and the second network node. 

29. (Original) The computer program product of claim 19 in which the first network node 
passes information to the second network node regarding a prior chain of links related to the link 
request. 

30. (Original) The computer program product of claim 29 in which the information regarding 
the prior chain of links comprises identification of all previous users in the prior chain of links. 

3 1 . (Original) The computer program product of claim 29 in which the information regarding 
the prior chain of links comprises identification of previous nodes in prior related links 

32. (Original) The computer program product of claim 29 in which a last entry in the 
information is checked for an untrusted user/node combination. 

33. (Original) The computer program product of claim 32 in which trusted user/node 
combinations are maintained at a central authority. 

34. (Original) The computer program product of claim 33 in which the central authority is the 
directory. 

35. (Original) The computer program product of claim 33 in which untrusted combinations 
are stored in a database. 
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36. (Original) The computer program product of claim 1 9 further comprising: 
establishing the link between the first network node and the second network node only upon 
verification of the user credentials if the data object indicates that user credentials are required. 

37. (Currently Amended) A system of networked nodes in a distributed system, comprising: 
a domain; 

a first network node associated with the domain; 

a second network node associated with the domain; and 

a data object associated with the domain, the data object indicatin g, before a link is 
established between the first network node and the second network node, whether a link can be 
established between the first network node and the second network node without verification of 
user credentials. 

38. (Original) The system of claim 37 in which the link is requested by a connected user, and 
the link is established as a connected user. 

39. (Original) The system of claim 37 in which the link is requested by a connected user, and 
the link is established as a current user, 

40. (Original) The system of claim 37 further comprising a link request embedded in a stored 
object. 

41 . (Original) The system of claim 40 in which the stored object is selected from the list 
consisting of: a procedure, a function, a view, a trigger. 

42. (Original) The system of claim 37 in which the second network node comprises a list of 
untrusted nodes, wherein the link between the first network node and the second network node is 
established only upon verification of the user credentials if the list of untrusted nodes indicates 
that the first network node is untrusted. 

7 

PA/52167231.1/2021039-7010852004/OID-2000-086-01 



PATENT 

Attorney Docket No(s). 255/220; 

7010852004 

43. (Original) The system of claim 37 in which the data object that indicates whether the 
domain permits links between nodes without verification of user credentials is a flag in a domain 
object corresponding to the domain. 

44. (Original) The system of claim 37 in which mutual authentication occurs between the first 
network node and the second network node. 

45. (Original) The system of claim 37 in which the first network node passes information to 
the second network node regarding a prior chain of links related to the link request. 

46. (Original) The system of claim 45 in which the information regarding the prior chain of 
links comprises identification of all previous users in the prior chain of links. 

47. (Original) The system of claim 45 in which the information regarding the prior chain of 
links comprises identification of previous nodes in prior related links 

48. (Original) The system of claim 45 in which a last entry in the information is checked for 
an untrusted user/node combination. 

49. (Original) The system of claim 48 in which trusted user/node combinations are 
maintained at a central authority. 

50. (Original) The system of claim 49 in which the central authority is the directory. 
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